Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa
File:                     d4a714f3-d6ab-3784-91ec-aa3610979901.roa (raw, json)
Hash identifier:          KeURnqYyTBLsl4y2QZL2MCuYjIoNX+Dt4+xgu8zjqmw=
Subject key identifier:   1B:59:57:98:9D:20:CA:26:55:A4:CD:20:18:1C:4E:F5:06:5D:98:58
Certificate issuer:       /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Certificate serial:       010D0C9F4328584ED9C74986787569E7906F2180
Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     19905
IP address blocks:        104.250.64.0/19 maxlen: 24
                          147.194.0.0/16 maxlen: 24
                          192.235.128.0/17 maxlen: 24
                          209.163.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:49:86:78:75:69:e7:90:6f:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=a6eb1381-896e-4556-aaae-9825eca63993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7f:bd:f3:5d:66:dc:10:61:07:d5:79:5e:e2:
                    3f:e8:fd:cc:2f:61:a2:dc:59:16:33:09:bc:3d:17:
                    0c:a0:29:0e:26:b8:a3:08:b1:4e:a7:c1:a2:84:67:
                    21:cc:a8:e2:19:68:a0:2f:bb:2b:c3:98:6a:78:a1:
                    b7:06:fb:fe:6e:97:08:55:f9:7b:2c:26:9d:21:13:
                    cf:54:fa:bb:7f:fc:33:c4:d9:bf:0a:8e:ae:ab:36:
                    e8:37:54:5e:e5:3b:31:36:3d:4f:7f:eb:9c:fa:1c:
                    a0:fe:90:a9:03:17:7b:fd:03:dd:93:d3:36:3a:c7:
                    fb:34:ea:f5:e3:6c:f1:41:65:ca:88:1f:d9:6c:1b:
                    c4:3c:f2:91:82:36:fc:9e:9a:61:d4:57:ef:7b:5a:
                    48:af:42:7e:c6:44:31:5f:d1:f8:60:00:14:09:ff:
                    41:ef:6a:ff:1d:f2:8a:91:3c:aa:a1:e0:17:91:1a:
                    e9:d8:54:dc:c6:56:9a:a1:ef:e7:bf:07:ac:8e:7d:
                    61:c7:f0:08:5b:59:f2:45:f6:4d:41:43:a0:86:61:
                    51:9b:b2:74:3d:07:fe:8f:d1:d9:1a:79:9b:dd:ad:
                    c0:b3:86:92:89:2c:3a:e0:fc:8a:49:49:ec:55:fa:
                    32:c9:e1:99:e8:2b:77:36:d1:48:4a:60:6d:5b:b0:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:59:57:98:9D:20:CA:26:55:A4:CD:20:18:1C:4E:F5:06:5D:98:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl

            X509v3 Authority Key Identifier:
                keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.64.0/19
                  147.194.0.0/16
                  192.235.128.0/17
                  209.163.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d3:7b:c9:84:bc:f4:f3:0a:04:fd:b2:73:0b:cf:e3:36:45:
         2f:76:ed:ad:89:3a:65:33:2e:a5:9c:68:83:c0:8b:5b:23:9f:
         ef:32:b8:14:8a:07:92:71:23:3b:8b:85:ac:75:a1:29:66:e0:
         6c:c6:ab:72:6e:d5:3c:e6:69:e2:8b:a4:bc:7f:ba:59:7d:d1:
         63:40:53:a2:aa:c6:71:0f:0e:43:a7:c6:68:36:23:81:56:64:
         6c:97:fa:d9:69:b6:90:55:eb:10:71:9b:be:05:12:10:28:47:
         51:45:2c:db:a5:01:87:61:16:28:72:5e:95:d5:8a:4a:58:b3:
         2b:eb:d5:f1:5a:ea:ae:1d:25:4c:db:7b:ee:59:6c:7f:72:6f:
         33:ca:2c:02:4a:3c:f9:c3:2a:dd:fd:80:09:0f:a9:65:de:78:
         61:92:68:fd:45:f5:bb:10:4c:b8:9c:3b:6f:6d:1f:2e:d4:07:
         24:bd:09:f7:56:a0:05:3b:d1:89:2c:9e:e5:27:bf:5e:f4:22:
         70:b0:f5:f5:d7:a0:7e:2b:fe:8a:4f:b2:43:da:e3:d6:52:a9:
         cb:7f:52:c0:75:00:02:57:f7:2c:82:0b:93:a0:f1:9f:0f:34:
         4d:f6:14:67:c5:ea:98:0e:71:bc:1a:2d:b4:f2:d8:b9:c6:d0:
         fc:05:ea:0e
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE7Zx0mGeHVp55BvIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMw
ZWZiMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
YTZlYjEzODEtODk2ZS00NTU2LWFhYWUtOTgyNWVjYTYzOTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH+9811m3BBhB9V5XuI/6P3ML2Gi3FkWMwm8
PRcMoCkOJrijCLFOp8GihGchzKjiGWigL7srw5hqeKG3Bvv+bpcIVfl7LCadIRPP
VPq7f/wzxNm/Co6uqzboN1Re5TsxNj1Pf+uc+hyg/pCpAxd7/QPdk9M2Osf7NOr1
42zxQWXKiB/ZbBvEPPKRgjb8npph1Ffve1pIr0J+xkQxX9H4YAAUCf9B72r/HfKK
kTyqoeAXkRrp2FTcxlaaoe/nvwesjn1hx/AIW1nyRfZNQUOghmFRm7J0PQf+j9HZ
Gnmb3a3As4aSiSw64PyKSUnsVfoyyeGZ6Ct3NtFISmBtW7Aj3QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFBtZV5idIMomVaTNIBgcTvUGXZhYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1
M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvZDRhNzE0ZjMtZDZhYi0z
Nzg0LTkxZWMtYWEzNjEwOTc5OTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGU2NTNmMzctNGIyMi00MGEzLWE4
YmQtZTcwZjIwOGMwZWZiLzRlNjUzZjM3LTRiMjItNDBhMy1hOGJkLWU3MGYyMDhj
MGVmYi5jcmwwHwYDVR0jBBgwFoAUIiOW/w0X1WDrC+ORelaadJKAwRgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBm
MjA4YzBlZmIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQFaPpAAwMA
k8IDBAfA64ADBAXRo0AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADdN7yYS89PMKBP2ycwvP4zZFL3btrYk6
ZTMupZxog8CLWyOf7zK4FIoHknEjO4uFrHWhKWbgbMarcm7VPOZp4oukvH+6WX3R
Y0BToqrGcQ8OQ6fGaDYjgVZkbJf62Wm2kFXrEHGbvgUSEChHUUUs26UBh2EWKHJe
ldWKSlizK+vV8Vrqrh0lTNt77llsf3JvM8osAko8+cMq3f2ACQ+pZd54YZJo/UX1
uxBMuJw7b20fLtQHJL0J91agBTvRiSye5Se/XvQicLD19degfiv+ik+yQ9rj1lKp
y39SwHUAAlf3LIILk6Dxnw80TfYUZ8XqmA5xvBottPLYucbQ/AXqDg==
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:06:57 2026 by rpki-client